Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subprocess launch fails with EINVAL or ENOENT errors.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-19 | 5 | Disclosure4General1 |
| 2026-03-21 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-32000 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-32000 #CVE-2026-32000 #CVE #Medium #CyberSecurity #InfoSec https://t.co/0VtqDdMx9z
Post summary
The tweet merely announces CVE‑2026‑32000 with a severity score and links to the NVD entry, lacking any technical, exploit, or mitigation details.
CVE Alert: CVE-2026-32000 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-32000-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32000 #openclaw #
Post summary
The post merely references a CVE alert link for OpenClaw with no additional details on the vulnerability, PoC, exploit, or mitigation.
Top cybersecurity news: CVE-2026-32255: Kan project management tool versions 0.5.4 and below are vulnerable to unauthenticated SSRF via the attachment download endpoint, posing significant security risks. CVE-2026-32805: Romeo's archive sanitization process is susceptible to path traversal due to missing checks, potentially allowing unauthorized access. CVE-2025-55040: MuraCMS faces a CSRF vulnerability, enabling attackers to upload malicious form definitions without user consent. CVE-2026-32000: OpenClaw versions before 2026.2.19 are vulnerable to command injection via the Lobster tool, exposing systems to potential shell metacharacter attacks. Stay sharp. Stay secure. #NerdieNews #CyberSecurity #InfoSec #ZeroDay #PatchTuesday
Post summary
The post announces several new CVEs, detailing the affected software and vulnerability types, but does not mention proofs of concept, exploitation, or mitigation.
CVE-2026-32000 OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: tr… https://www.cve.org/CVERecord?id=CVE-2026-32000
Post summary
CVE-2026-32000 exposes a command injection vulnerability in OpenClaw versions before 2026.2.19 via the Lobster extension tool, using Windows shell fallback.
CVE-2026-32000 Command Injection Vulnerability in OpenClaw Lobster Extension Tool Prior to 2026.2.19 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32000
Post summary
A command injection vulnerability (CVE-2026-32000) exists in OpenClaw Lobster Extension Tool versions prior to 2026.2.19, as reported on Vulmon.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32000 - OpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool Execution Intel Report: http://blog.cyberdudebivash.com/2026/03/cve-2026-32000-openclaw-2026219-command.html
Post summary
The post announces CVE-2026-32000 as a command injection flaw in OpenClaw versions prior to 2026.2.19, without providing PoC, exploit code, or a patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |